Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E681416041C511E8BEC06D36C4F9AE02.roa
File: E681416041C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: bHiiIS3BwoO5KuYLpL/BbLehporq4oxa+44HbBZEM3U=
Subject key identifier: C5:E2:DB:55:5C:DE:85:FD:15:13:D0:99:50:96:CB:4B:A2:3E:1D:0D
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2772
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E681416041C511E8BEC06D36C4F9AE02.roa
Signing time: Tue 30 Jul 2024 16:04:26 +0000
ROA not before: Tue 30 Jul 2024 16:04:26 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 49745
IP address blocks: 2402:9e80:20::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10098 (0x2772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D
Validity
Not Before: Jul 30 16:04:26 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a90f0a-3f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:9e:06:ee:81:71:fc:52:e7:11:df:3a:4a:8c:
e0:ce:76:68:1d:87:a9:26:f8:22:09:87:b0:aa:47:
fe:5c:9f:3a:5e:84:6e:7f:67:0b:1f:f4:76:f0:21:
5c:d8:63:af:58:a9:69:47:5f:d7:bd:67:15:72:00:
ba:af:55:09:90:0b:5c:2a:18:18:ec:1c:72:1a:7a:
12:50:b6:ea:ab:24:08:d8:cf:58:15:be:1c:f2:61:
0c:2a:91:02:b9:91:78:cd:36:90:b3:6b:f6:41:fc:
9b:6e:09:ee:84:88:c9:c8:db:45:c9:77:c8:32:44:
32:4d:e7:ca:ed:3e:1d:c3:e6:6f:88:33:e2:11:8b:
4a:be:8a:31:dc:d5:1c:7d:75:67:94:0a:7b:9f:9f:
ba:e4:9c:f1:e4:b9:ea:7e:41:39:13:fd:b8:78:e6:
af:f2:34:2d:49:7f:15:1c:96:c0:1d:b8:2b:7f:2e:
2f:90:fb:c2:97:88:41:5c:af:b0:45:61:99:a2:d1:
db:00:25:b3:52:42:cd:46:26:63:25:35:69:10:9d:
2b:00:88:d6:c9:6c:bd:9a:ba:c2:2e:85:a7:e3:aa:
65:0d:bb:7f:9a:bc:33:49:f9:71:fa:ba:73:4e:49:
de:2a:0d:50:62:31:50:ca:24:9a:93:77:21:c8:d9:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:DB:55:5C:DE:85:FD:15:13:D0:99:50:96:CB:4B:A2:3E:1D:0D
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E681416041C511E8BEC06D36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:20::/47
Signature Algorithm: sha256WithRSAEncryption
8c:dd:82:c1:ea:ad:b6:b8:3c:9a:2e:6a:ca:68:6b:68:5c:73:
7e:f0:73:f5:1c:c7:d7:d9:5f:c9:04:fe:c2:9d:c0:6b:86:e9:
2a:44:11:9c:b5:9f:f4:c2:e7:6c:ec:fd:fa:09:f2:4e:84:47:
d0:63:6e:4a:dc:ec:7c:01:7a:03:16:7d:90:02:44:a3:a8:b0:
fc:0f:e7:0d:4c:56:54:63:0d:65:f0:2c:60:91:30:1c:3a:3d:
a9:63:11:eb:a6:b9:f8:6e:fd:2c:0e:35:54:3c:4c:5b:61:89:
1b:c6:83:f5:2f:82:11:f0:28:16:1c:ca:80:39:6b:f0:37:cf:
ed:d3:0a:b5:2e:b6:9c:52:fa:59:f6:58:c1:ee:43:b3:4d:5e:
4a:ca:3b:b0:d7:08:df:05:ed:43:6f:b8:79:d7:79:75:98:c7:
2a:f5:67:0c:03:4f:87:4d:1f:70:3c:c3:f9:4b:2c:f9:5d:a1:
23:5f:a1:d0:f2:62:ae:cd:0d:ab:88:82:63:df:90:99:93:46:
f1:fb:dd:60:81:a7:68:ea:69:3c:2d:8b:20:7b:c9:7b:a8:fa:
75:5a:1e:94:26:fa:60:4f:09:b6:92:28:39:96:d7:09:83:db:
5a:d7:a4:b1:67:8a:85:92:28:d7:3c:58:9a:02:eb:3a:5e:75:
2a:83:a5:77
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICJ3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjQwNzMwMTYwNDI2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5MGYwYS0zZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+p4G7oFx/FLnEd86SozgznZoHYepJvgiCYewqkf+XJ86XoRuf2cLH/R28CFc
2GOvWKlpR1/XvWcVcgC6r1UJkAtcKhgY7BxyGnoSULbqqyQI2M9YFb4c8mEMKpEC
uZF4zTaQs2v2QfybbgnuhIjJyNtFyXfIMkQyTefK7T4dw+ZviDPiEYtKvoox3NUc
fXVnlAp7n5+65Jzx5LnqfkE5E/24eOav8jQtSX8VHJbAHbgrfy4vkPvCl4hBXK+w
RWGZotHbACWzUkLNRiZjJTVpEJ0rAIjWyWy9mrrCLoWn46plDbt/mrwzSflx+rpz
TkneKg1QYjFQyiSak3chyNlriwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMXi21Vc
3oX9FRPQmVCWy0uiPh0NMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRTY4MTQxNjA0
MUM1MTFFOEJFQzA2RDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwEkAp6AACAwDQYJKoZIhvcNAQELBQADggEBAIzdgsHqrba4
PJouaspoa2hcc37wc/Ucx9fZX8kE/sKdwGuG6SpEEZy1n/TC52zs/foJ8k6ER9Bj
bkrc7HwBegMWfZACRKOosPwP5w1MVlRjDWXwLGCRMBw6PaljEeumufhu/SwONVQ8
TFthiRvGg/UvghHwKBYcyoA5a/A3z+3TCrUutpxS+ln2WMHuQ7NNXkrKO7DXCN8F
7UNvuHnXeXWYxyr1ZwwDT4dNH3A8w/lLLPldoSNfodDyYq7NDauIgmPfkJmTRvH7
3WCBp2jqaTwtiyB7yXuo+nVaHpQm+mBPCbaSKDmW1wmD21rXpLFnioWSKNc8WJoC
6zpedSqDpXc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:54:43 2025 by rpki-client